Connections in CLOSE_WAIT

[Hermanverschooten]

Hi,
I noticed on a number of production servers that there are a number of TCP connection to https://www.iana.org that remain in CLOSE_WAIT. The only code that references www.iana.org seems to be tzdata. Do you have any clue?

COMMAND   PID USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
beam.smp 1424 root   11u  IPv4   18985      0t0  TCP *:35058 (LISTEN)
beam.smp 1424 root   12u  IPv4   18987      0t0  TCP localhost:60553->localhost:epmd (ESTABLISHED)
beam.smp 1424 root   13u  IPv4   18137      0t0  TCP gratwifi.lan:81 (LISTEN)
beam.smp 1424 root   16u  IPv4  422369      0t0  TCP 192.168.1.7:42237->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   17u  IPv4   16152      0t0  UDP *:52241
beam.smp 1424 root   19u  IPv4  723308      0t0  TCP 192.168.1.7:37011->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   20u  IPv4  581191      0t0  TCP 192.168.1.7:60339->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   21u  IPv4 1129389      0t0  TCP 192.168.1.7:54109->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   22u  IPv4  864988      0t0  TCP 192.168.1.7:59174->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   23u  IPv4 1011660      0t0  TCP 192.168.1.7:56804->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   24u  IPv4 1276491      0t0  TCP 192.168.1.7:58875->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   25u  IPv4 1435758      0t0  TCP 192.168.1.7:33240->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   26u  IPv4 1592295      0t0  TCP 192.168.1.7:37590->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   27u  IPv4 1764131      0t0  TCP 192.168.1.7:41133->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   28u  IPv4 2365627      0t0  TCP 192.168.1.7:32983->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   29u  IPv4 1955942      0t0  TCP 192.168.1.7:59567->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   30u  IPv4 2573572      0t0  TCP 192.168.1.7:45931->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   31u  IPv4 2168659      0t0  TCP 192.168.1.7:50945->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   32u  IPv4 2499120      0t0  UDP *:60100
beam.smp 1424 root   33u  IPv4 2979799      0t0  TCP 192.168.1.7:37016->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   34u  IPv4 2785116      0t0  TCP 192.168.1.7:33791->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   35u  IPv4 3183900      0t0  TCP 192.168.1.7:37685->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   36u  IPv4 3352151      0t0  TCP 192.168.1.7:56252->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   37u  IPv4  101022      0t0  TCP 192.168.1.7:59720->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   38u  IPv4  262679      0t0  TCP 192.168.1.7:46152->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   39u  IPv4 3537364      0t0  TCP 192.168.1.7:39599->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   40u  IPv4 3882622      0t0  TCP 192.168.1.7:60647->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   41u  IPv4 3733899      0t0  TCP 192.168.1.7:35346->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   42u  IPv4 4064143      0t0  TCP 192.168.1.7:52116->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   43u  IPv4 4372605      0t0  TCP 192.168.1.7:52828->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   44u  IPv4 4512808      0t0  TCP 192.168.1.7:38491->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   45u  IPv4 4235652      0t0  TCP 192.168.1.7:45662->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   46u  IPv4 4630737      0t0  TCP 192.168.1.7:54971->www.iana.org:https (CLOSE_WAIT)
beam.smp 1424 root   47u  IPv4 4790369      0t0  TCP 192.168.1.7:49358->www.iana.org:https (CLOSE_WAIT)

[lau]

Hi. It sounds likely that that is tzdata. In the default configuration iana.org is polled every day for updates to the timezone rules.